mbpcoder/grandpa

Dependency profilecaution

Ten runtime dependencies create a relatively broad dependency surface for a young deployment and task-scheduling tool. The available data does not show that these dependencies are problematic, so this is a moderate maintenance concern rather than a severe risk.

Licensecaution

No license is declared, no license file is included in the package, and no repository license file was found. This leaves the release without clear legal terms for adoption.

Release historycaution

The package is only 94 days old and has three releases, all within roughly five days, so it shows early activity but limited evidence of long-term maintenance.

Repo bus factorcaution

One contributor made all 45 commits in the last three months, leaving maintenance highly dependent on a single person and increasing abandonment risk.

Repo toolingcaution

Composer is used for builds, but no security-scanning tools were detected. The missing scanning is a hygiene gap, not evidence that the package is unsafe.